Results 1 to 5 of 5
  1. #1
    Join Date
    May 2009
    Location
    Greece
    Posts
    1,047

    Question Is it secure to use https as ssl is cracked?

    Hello

    Is it secure to use https on whm access as ssl is cracked using the software ssl strip?

    Thank you

  2. #2
    Join Date
    Mar 2009
    Location
    Austin Tx
    Posts
    2,007
    sslstrip would not be too much of a concern unless you do major e-commerce, or are a bank, paypal...etc. It wouldn't be worth the time and risk to hit most e-commerce sites. It's not really cracked, that implies they unencrypted something, not just listen for an https call on the network and inject a re-direct, of which, to be practical, the target has to be constructed, hosted, maintained to look very similar to the site at which user was expecting to land.
    This is the best signature in the world....Tribute!
    (It is not the best signature in the world, no. This is just a tribute)

  3. #3
    Join Date
    Oct 2009
    Posts
    416
    It doesn't actually crack SSL, it just sort spoofs it's way around it which, as mugo mentioned, is not trivial to setup.

    In any case, using HTTPS is still much safer than not using it, and there are no real alternatives at the moment.

  4. #4
    Join Date
    May 2009
    Location
    Greece
    Posts
    1,047
    Ok thanks

  5. #5
    As xnpu says, SSL is better than nothing.
    You may also consider to allow WHM access only from your IP.

Similar Threads

  1. cURL with OpenSSL and Secure HTTPS
    By AndreF in forum Programming Discussion
    Replies: 6
    Last Post: 06-19-2008, 08:15 AM
  2. SSL on https://domain.com vs https://www.domain.com
    By sbogde in forum Hosting Security and Technology
    Replies: 3
    Last Post: 10-02-2007, 05:40 AM
  3. secure https directory accessable with http
    By c_developer in forum Hosting Security and Technology
    Replies: 5
    Last Post: 09-14-2006, 01:40 PM
  4. Cpanel - Https (secure). Where are they?
    By matrixman in forum Hosting Software and Control Panels
    Replies: 1
    Last Post: 03-07-2005, 10:27 PM
  5. https://secure.domain.com is not working.
    By astraler2k in forum Hosting Security and Technology
    Replies: 4
    Last Post: 11-04-2002, 12:41 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •